Re: Using XACML profile to describe two current browser policies

Hi Paddy,

Le mercredi 23 juin 2010 à 10:57 +0100, Paddy Byers a écrit :

> So I don't think the intention of the policy is to be fully
> prescriptive as to how a browser controls access and the associated
> user experience. When this was originally specified in BONDI the idea
> was that the policy tells the browser the bottom line as to what it
> can and cannot allow, but still the browser can (and should) be free
> to provide the best possible user experience, balancing convenience to
> the user, respect for the user's own choices, and offering reasonable
> yet usable safeguards for foreseeable use cases.
> [...]

Thanks, that's a pretty important clarification! I think it should be
included/detailed in one of the policy documents.

I'll have to look deeper into it with that perspective; I think it opens
up more issues about the actual meaning of the "prompt-*" effects.

Dom

Received on Wednesday, 23 June 2010 12:22:02 UTC